Enable CredSSP support = False (enablecredsspsupport:i:0) is ignored in Embedded (tabbed) mode

Implemented

Enable CredSSP support = False (enablecredsspsupport:i:0) is ignored in Embedded (tabbed) mode

avatar

For certain servers I need to disable CredSSP Support (enablecredsspsupport:i:0 in .rdp file).

This setting works OK if I open my remote desktop display in External mode, but appears to be ignored when opening in Embedded (tabbed) display.

All Comments (25)

avatar

Hello,

In the properties of your RDP session, go in the Advanced tab and select False for CredSSP Support

This should do the trick.

Best regards,

Jeff Dagenais

avatar

Hi, that is what I have done, but the change only applies when I open sessions in External mode and not in Tabbed.

Thanks, David.

avatar

Hello,

In embedded mode, we use the same Microsoft ActiveX that is used in Microsoft RDC Manager and in this application, I do not see any option regarding CredSSP. I would need to verify with our engineering department if it should work or not in embedded mode.

What version of RDM are you running?

Best regards,

Jeff Dagenais

avatar

Hi, I am running Windows 10.

The specific version of mstsc.exe is: 10.0.16299.461

The RDM Version is: 4.6.0.0 64-BIT (portable download, but running from C: drive - not from USB)

avatar

Could you try to uncheck the NLA (Network Level Authentication)?

Regards

David Hervieux

avatar

Great thanks for the suggestion - unchecking "Activate netowrk level authentication NLA (SingleSignOn)" on the Connection tab worked. :)

avatar
neocid
Disabled

Windows10/RDM 13.6.7

A coworker of mine reported a similar problem. But David's hint doesn't work.

When connecting to a Windows Server host joined to AzureAD using an AzureAD user he needs to disable SSP Support. This works with standard mstsc when altering a .rdp file (add enablecredsspsupport:i:0) or with RDM when embedding this rdp file.

It does NOT work, when using a RDM RDP Session and setting Enable CredSSP support to FALSE. Even when unchecking "Activate network level authentication NLA (SingleSignOn)". "Open external" makes no difference.

It DOES work with RDM RDP when using a local user for this host.

avatar

@Daniel Messer,

Could you try to create a .rdp file that is working with mstsc.exe outside RDM and import it in RDM to see if it's still continue to work?

After the import, the session should open in external mode. If the connection is established properly, then, change the display setting to embedded to see if it's still connecting.

Best regards,

Jeff Dagenais